Out-of-Bounds Write Vulnerability in Substance3D Painter by Adobe

CVE-2024-47428

What is CVE-2024-47428?

An out-of-bounds write vulnerability exists in Substance3D Painter versions 10.1.0 and earlier, posing a risk of arbitrary code execution if exploited. This security flaw requires user interaction, as a victim must open a specially crafted malicious file. Once executed, the vulnerability could allow attackers to manipulate the software and potentially compromise the user's system. It is crucial for users to ensure the use of updated software versions to mitigate the risks associated with this vulnerability.

References